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Abstract 

Property testing has been extensively studied and its target is to de- 
termine whether a given object satisfies a certain property or it is far from 
the property. In this paper, we construct an efficient quantum algorithm 
which tests if a given quantum oracle performs the group multiplication 
of a solvable group. Our work is strongly based on the efficient classi- 
cal testing algorithm for Abelian groups proposed by Friedl, Ivanyos and 
Santha. Since every Abelian group is a solvable group, our result is in a 
sense a generalization of their result. 



1 Introduction 

In order to guarantee the behavior of a program, we must prove it mathemati- 
cally. For an ideal algorithm, constructing a perfect proof can be done, but for 
practical software, it is usually difficult and tedious. Furthermore such an ap- 
proach cannot detect hardware based errors (common in the quantum setting) . 
Testing the outputs through all inputs ensures the correctness of an algorithm 
exactly but it takes too much time. In this context, program checking 0|3], 
self-testing [§] and self-correcting |^] were introduced. A program checker 
checks if a program is correct on a particular input. A self-tester tests if a pro- 
gram is correct on most inputs. A self-corrector computes a correct value using 
a program which is correct on most inputs. In the study of these methods, the 
relation between a function / itself and a program P expected to compute / 
matters. 

Property testing is another checking technique. It deals with efficient al- 
gorithms deciding whether a given object has some expected property or it is 
far from any object having that property In testing a function, the difference 
between property testing and self-testing is that property tester tests only if a 
program has the property which the function has, and does not test if a pro- 
gram's behavior is the function itself. One of the interests of property testing is 
that, by running property testing algorithm in advance self-testing tasks become 
quite easy in many cases. The notion of property testing was first introduced 
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by Rubinfeld and Sudan (321 . In this setting many properties including alge- 
braic function properties El El El ESI j graph properties [201 E] > computational 
geometry properties ^ E] and regular languages El E] were proved to be 
testable. Quantum testers have also been studied and they are known to be 
more powerful than classical testers El El El- See EI ED] for surveys on 
property testing. 

The most active research areas in quantum computing are group theoretic 
problems. Shor's factorization algorithm can be regarded as an instance of 
the hidden subgroup problem (HSP) (see E] for a survey). The HSP over dihe- 
dral groups and symmetric groups are interesting and challenging because the 
former corresponds to the unique shortest vector problem El and the latter to 
the graph isomorphism problem. Other quantum algorithms for group theoretic 
problems EJEI are also known. In most of these problems, group operations 
are carried out using group oracles. Given two elements a, b in a group, the 
group oracle returns a ■ 6, and it returns the inverse a -1 given an element a. 
However its structure is unknown to us in the setting. Thus a natural question 
arises: is a given group oracle really what we expect? 

Now our concern is to test if a given oracle has the property as a supposed 
group oracle. This test is related to the tests to decide whether a given oracle is 
that of some group and whether a function from a group to another group is a 
homomorphism. The second test has been studied El and it can be done effi- 
ciently in the classical setting. About the first test, classical algorithms testing 
associativity of given functions were constructed in |121 128| . These algorithms 
can be used for general groups, but their running times are polynomial in the 
size of the ground sets. As each elements in a set T is encoded in 0(log|r|) 
bits, time complexities are exponential of the input lengths. However, Friedl, 
Ivanyos, and Santha have succeeded in designing a polynomial time algorithm 
which tests whether a given oracle is an Abelian group oracle or not |18| . Their 
testing algorithm is a classical one, but its basic idea came from the quantum 
setting. 

In this paper, we construct an efficient quantum algorithm for the problem 
of testing whether a given oracle is that of a solvable group. The definition of 
solvable group is as follows. 

Definition 1. A group G is solvable if it has a normal subgroup chain {1} = 
Go < • • • < Gt = G such that Gi+i/Gi is an Abelian group for all i. 

It is obvious that an Abelian group is a solvable group. We can find much 
more solvable groups in quantum computation areas. Dihedral groups over 
which the HSP is solvable in subexponential time E] are solvable groups. 
Moreover some non-Abelian groups over which the HSP are efficiently solv- 
able are solvable EU El El El El E] Watrous's algorithm gU and Fenner 
and Zhang's algorithm El are also for solvable groups. As can be seen from the 
above examples, quantum oracles for solvable groups are used in many impor- 
tant algorithms. Hence it is natural to focus on the problem of testing if given 
oracles are really solvable group oracles. 
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2 Definitions 



We give a formal definition for property testers. 

Definition 2. Let f be a function, P a set of functions, and d a distance func- 
tion between functions. A quantum e-tester for P with distance d is a quantum 
oracle Turing machine M such that 



We use d{f, P) to represent inf 9S p d{f, g) here. 

Just like the Abelian case, in this paper we adopt the edit distance as the 
distance function, which we now define. The complete definition is described 
in |18| . A table is a square matrix and its size is the number of elements. We 
consider three operations to transform a table to another. 

An exchange operation replaces elements in a table by arbitrary elements 
and its cost is a number of replaced elements. An insert operation inserts new 
rows and columns. A delete operation deletes existing rows and columns. The 
indices of inserted/deleted rows and columns must be equivalent. Its cost is a 
number of inserted/deleted elements. 

We define edit distance for tables using the idea of transform, and extend it to 
magmas. A magma M is a set equipped with a binary operation • : MxM-> M. 
A multiplication table of a magma M is a table of which both rows and columns 
have a one-to-one correspondence with elements in M, <fi ■ {1, ■ • • > \ M\} — ► M, 
and elements in the i-th row and the j-th column is equivalent to cf>(i) ■ 4>{j). 

Definition 3. Edit distance between two tables T and T' is the minimum cost 
needed to transform T to T' divided by the maximum size between T and T' . 

Edit distance between two magmas M and M' is the minimum edit distance 
between T and T" where T[T'] runs over all tables which is a multiplication 
table of M[M']. We identify two multiplication tables if we can obtain one from 
another only by renaming elements in its ground sets. 

We say that a magma M is e-close to another magma M' if the distance 
between them is less than or equal to e, and that M is e-far from M' otherwise. 

3 Algorithm 

3.1 Overview 

We are given a set T and a quantum oracle which performs a binary operation 
• over r. This quantum oracle carries out the following unitary operations: 
\a)\b) i ► |a)|a • b) for all a,b <ET. 

Theorem 4. There exists a quantum e-tester for solvable groups which runs in 
polynomial time in log |T| and e _1 . 
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Pr [M f (e) accepts] > | ifd(f,P) = 
Pr[M/(e) accepts] < f ifd(f,P)>e. 
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Here, we identify a magma with its multiplication function. 
We now overview our testing algorithm. The details are given in subsequent 
subsections. 

First, we pick sufficiently many random elements a±, - ■ ■ ,a s from the ground 
set T. As in Watrous's algorithm we apply Babai et al.'s polynomial time 
Monte Carlo algorithm g] which tests whether an input group is solvable. Notice 
that this algorithm requires that the input is a group, so we cannot decide if 
(r, •) is a solvable group at this stage. When the input is a group, we obtain 
the elements hi, ■ ■ ■ , h t satisfying 

{1} = Go < • • • <J G % = (hi, ■ ■ ■ , hi) < ■ ■ ■ < G t = (ai, • • • , a 8 ). 

Now we define the set Hj C T corresponding to Gj, as the following: 

H Q = {1}, ^ = {h« ■ h\a G 1 m] , h G Hj-i}. 

The integer rrij is the order of hj with respect to Hj—i, and the way to obtain 
it is given later. 

Since Hq is an identity group, it is obviously a solvable group. If we can test 
whether Hj is a solvable group under the assumption that Hj-i is a solvable 
group, we can test whether H t is a solvable group inductively. We show how to 
test it. 

Assume that Hj_i is |-close to a solvable group Hj_i, multiplication of 
which can be computed efficiently In order to test if Hj is a solvable group, we 
construct a solvable group which is |-close to Hj using Hj-\. For this purpose 
we use the following theorem also used for Abelian groups. 

Theorem 5 (Theorem 2 of [18 ). Let G be a group, f : G — > H be a function 
and i] < yi^. Assume that the inequality Pr x ^ y ^c[f{xy) = f(x) ■ f(y)] > 1 — rj 
holds. Then there exists a group H with multiplication * and a homomorphism 
f : G — > H such that 

1. \H\H\ < 30rj\H\, 

2. Pr a ^ s [a*P^a-p} <91 V> 

3. Pr xeG [f(x) ? f(x)] < 3077. 

We construct a group G and a function / in such a way that / is an isomor- 
phism and H is e-close to H. And then for a random pair of x and y we test 
whether it satisfies f(xy) = f(x) ■ f(y), which we call a homomorphism test. We 
evaluate the probability inequality by conducting homomorphism tests several 
times. Applying the theorem, if the inequality is satisfied there exists a solvable 
group Hj which is |-close to Hj . 

As a result, we can test whether H t is a solvable group. However there might 
exist elements in T\H t . In order to guarantee the fraction of such elements is 
less than |, we pick 0(e _1 ) random elements from T and decompose them over 
H t . If there exist elements that cannot be decomposed, we reject. 

We summarize the algorithm briefly. 
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1. Find generators of a normal subgroup chain. 

2. For each 1 < j < t do (a) and (b). 

(a) Find the order of hj w.r.t. Hj-%. 

(b) Test if / is a homomorphism. 

3. Test if there exist elements in T\H t . 

The rest of this chapter covers the shortcoming of details and has the fol- 
lowing organization. Subsection 13 . 21 deals with the problem of finding the order 
of hj with respect to Hj—i, which is the key task in Watrous's order finding 
algorithm for solvable groups . In subsection 13.31 we show the algorithm 
to decompose an element over Hj. Utilizing the results obtained in these two 
subsections, in subsection 13.41 we construct a solvable group G and a function 
/ in Theorem With these G and / we apply Theorem and show that the 
group Hj is |-close to Hj in subsection 13. 51 Correctness and complexity of the 
algorithm are discussed in subsection 13.61 

3.2 The order of hj with respect to -Hj_i 

When Hj is a solvable group, we call rrij := min{m|/i™ € Hj-i} the order of hj 
with respect to Hj—i, which can be gained using Watrous's algorithm [j^]. Also 
in a non-group case, we call the value obtained from Watrous's algorithm the 
order of hj with respect to -ffj-i- The details of the algorithm are as follows. 
We prepare the superposition state over \Hj-i) = , = YlheH - I' 1 )' 

and the state over Z r , X)a=o l a ) where r is the order of hj and can be found 
by Shor's order finding algorithm |33) . Then we apply the following operations: 




The latter operation is the quantum Fourier transform modulo r. The multi- 
plication between h°j and h £ Hj_x is hj • h where h is an element in Hj—i 
corresponding to h. By observing the first register, we obtain b which is a mul- 
tiple of ^- since • Hj-\) = \Hj-i). Repetition yields the desired value rrij. 

For such rrij we check h" lj € -Hj— l by decomposing h™ 3 . 
3.3 Decomposition over Hj 

Testing if an element h in Hj is really a member of Hj reduces to the task of 
decomposing h over Hj. The decomposition algorithm is as follows. 
Suppose h = h°j 3 Sx • ■ • h ^ . First we prepare the following state: 

5>>|&>|fc°-(/^JTj-i)>. 

a . b 
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We can obtain dj as we do for discrete logarithm problem, because \h a ■ (hj ■ 
Hj-x)) = \Hj-x) for a and b satisfying h a ■ hj G Hj-x, that is aaj +6 = 0. 
Next we do similarly for h ■ hj ° 3 . Thus we can find each inductively, and we 
obtain a decomposition of h finally. 

3.4 Construction of G and / 

We construct an appropriate solvable group G and a function / in Theorem [S] 
and claim that Hj is e-close to Hj for such G and /. 

Wc define the group G first. We extend Hj-x which is almost isomorphic to 
Hj-x to a solvable group Hj by adding hj so that Hj is almost isomorphic to 
Hj. Consider a pair of two groups Z mj . x Hj—x and introduce a multiplication 
o over it satisfying (m,h) o (n,h!) = (m + n,(j) n (h)h'). Here, </> satisfies the 
following conditions: 

r <xwi') = <p{h)cj)(ti) 
{ i,(hi) = h^-ih-hj). 

If is an automorhphism of Hj—x, Z TO . x is a solvable group with the 

multiplication o, because it satisfies the definition of a group and (0,Hj_x) 
is its normal subgroup. In order to check if <j) is an automorphism, we must 
check \/i <j)(hi) £ Hj-x and = \<f>{Hj-x)\- The former can be done by 

decomposing (j>{hi) over and the latter by Watrous's algorithm. 

We have defined the group G, so next define the function ip like this: 

ip : Z mj x Hj-x ->■ Hj 
(n, h) ^ h j ■ h. 

Here h is represented as (a,j-i, • ■ ■ , ai) and /i is defined as h^Si h^ 1 for 

such diS. 

3.5 Application of Theorem [5] 

In order to conduct a homomorphism test with G = (Z mj x Hj—x, o) and / = ip 
which we have constructed in the previous subsection, we must compute ip{xy) 
for x,y € Hj efficiently. To that end, we need to know the value <fi n (h) for 
h G Hj-x- We show how to obtain it. Let h be represented as (cij-i, ■ ■ ■ , ax). 
Because 

^{hj-x^- 1 ■■■h a x l ) = rihj-xp- 1 ■ ■ ■ r(hx) ai 

holds, we only need the value <fi n (hi) for each i and n. We already know the 
value (f>(hi) by decomposition. Assume we know the value </> 2 (hi) for each i. 
The value 4> 2 + (hi) is equivalent to </> 2 (0 2 (/ij)), hence it can also be computed 
efficiently. The value for n which is not a power of two can be computed similarly. 
Therefore we can obtain all values inductively and compute the multiplication 
over G efficiently. 
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Now by applying the theorem we obtain the homomorphism ip and the group 
Hj, which we want to conclude is |-close to Hj. 

Proposition 6. Assume Hj~\ is —close to a solvable group Hj_i. If ip con- 
structed in the previous subsection satisfies Pr Xt y e Q[ijj(x o y) = ip(x) ■ ip(y)] > 
l — r), the group Hj the existence of which is guaranteed by Theorem\^is I5I77- 
close to Hj . 

Proof. The distance between Hj and Hj is determined by the number of ele- 
ments being a member of either set and the number of pairs of two elements 
multiplication of which differ by operation. In fact, to transform a multiplica- 
tion table of Hj to that of Hj, we first delete and insert rows and columns 
corresponding to elements in Hj\Hj and Hj\Hj respectively, and then ex- 
change multiplication values which differ between two tables. It follows that 
the number of elements in Hj\Hj and the number of pairs, 71 and 72 such that 
7i 72 7^ 7i • 72 j are small from 1 and 2 in Theorem [S] To complete the proof, 
we must show that the size of Hj\Hj is small. This follows from the theorem if 
I Hj I is greater than or equal to | Hj | . 

As tp is a homomorphism from G, Hj is isomorphic to a subgroup of G. Note 
that Hj cannot be isomorphic to a group of the form (Z mj x H' , o) where H' < 
Hj-i, because the contradiction that unitary operation \h™)\h) 1— > • h) 

is not invertible follows from 3 of Theorem^] Suppose ((no, ho)} is the kernel of 
V>. Since it is a subgroup of G, it follows that no is either rrij or a strict divisor 
of rrij . 

Assume uq 7^ rrij holds for contradiction. Recall how we found rrij. The 
theorem tell us for almost all n and h the value h™ ■ h is same with i/j(n,h). 
Therefore we must have obtained uq instead of irij since ■ -ffj-i) = \Hj-x). 
This is a contradiction. It follows that uq — rrij, therefore G = Hj holds. It 
indicates that \Hj\ = \G\ = rrij\Hj-x\ > \Hj\. □ 

By taking 77 so that I5I77 < |, we can test whether Hj is |-close to a solvable 
group under the assumption that flj-i is |-close to a solvable group Hj-%. 

3.6 Analysis 

In this subsection, we discuss the correctness and the complexity of the algo- 
rithm. We run the above algorithm to test whether a given oracle is that of a 
solvable group or not. If an error occurs during the execution we reject, other- 
wise we accept. We expect the algorithm to accept a solvable group oracle and 
reject the others with high probability, and work in polynomial time in log |T| 
and e _1 . 

It is obvious that a solvable group oracle passes the test with high probability. 
We would like to show that the oracle e-far from that of a solvable group is 
rejected with high probability. Take an oracle e-far from that of any solvable 
group, then H t is f-far from H t or |r\# t | > | holds. If the latter holds, it 
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should be rejected with high probability; hence we consider the former case. 
Suppose that the oracle passes all homomorphism tests. From Proposition 
since it passes the homomorphism tests the distance between H t -\ and any 
solvable group Ht-i is at least |. By repeating the above arguments, we see 
that the cyclic group H\ is f-far from any cyclic group but it passes the test 
for Abelian groups. This is a contradiction. 

We turn to the time complexity of the algorithm. The number of iterations of 
the task 3 in the diagram in subsection 3.1, t, is polynomial because the output 
size of the task 1 is also polynomial. We can easily know that the computation 
time of each task other than 3-(b) is polynomial. How many times do we need 
to repeat the homomorphism tests? Theorem [S] and Proposition tell us that 
suppose the stage j = k is the first stage such that the distance between Hk and 
Hk is greater than e we fail in the homomorphism test with probability greater 
than rj. When we repeat the tests c times, the probability never to fail is less 
than (1 — n) c . We are able to take c = O(^) to bound the success probability 
by i. As n is taken to be a constant times e, the total computation time is 
polynomial in logT and e _1 as we stated. 
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